- when you create a source, you must have administrator rights. Because method that checks if source exists looks through EVERY log in the system, including Security (which you can't touch if you're not administrator).

- it's better to not create logs with the same name as it's source's name (or any other source's name). I don't know why exactly but better not do that. It's asking for problems. (I usually create logs with names [SourceName + "Log"]).

- The first 8 characters of the source name must be unique. So if you create 3 sources named "MySource1", "MySource2", "MySource3" it will throw an exception.

- you have to be careful when subscribing to EntryWritten event (if you want to read from the log). Sometimes it behaves strangely - for example when log is cleared manually from windows event viewer EntryWritten event can get "unsubscribed" on it's own.